What debt collectors can and cannot do on WhatsApp, social media, and messaging apps.
Yes, but only with your consent. Under the CFPB's 2021 Debt Collection Rule, collectors can contact you via WhatsApp and other messaging apps if you've given prior express consent.
You can opt out anytime. Once you revoke consent or request no digital contact, they must stop.
Messages must be private. Collectors cannot post about your debt publicly or use friend requests that reveal their identity.
Every message must include opt-out. WhatsApp/SMS messages must include simple opt-out instructions (e.g., "Reply STOP to opt out").
In October 2020, the Consumer Financial Protection Bureau (CFPB) finalized new debt collection rules that took effect November 30, 2021. These rules updated the FDCPA for the digital age.
| Channel | Allowed? | Requirements |
|---|---|---|
| ✅ Yes | Must provide opt-out; cannot be to work email if collector knows it's prohibited | |
| SMS/Text | ✅ Yes | Prior consent required; must include opt-out instructions |
| WhatsApp/messaging apps | ✅ Yes | Prior consent required; messages must be private |
| Social media DMs | ✅ Yes (private only) | Must be private message; cannot reveal debt collection purpose publicly |
| Social media friend requests | ❌ No | Cannot send requests that reveal collector identity to third parties |
| Public posts/comments | ❌ No | Never allowed to post about debt publicly |
The CFPB rule sets federal minimum standards. Some states have stricter laws:
If your state law is stricter than the FDCPA, collectors must follow your state's rules.
Collectors can send direct messages about your debt if you've given prior consent. Messages must include opt-out instructions.
Collectors can include secure payment links in WhatsApp messages, but cannot threaten immediate consequences for not clicking.
Voice messages are allowed, but cannot contain harassing, obscene, or abusive language.
FDCPA time restrictions apply: 8am-9pm your local time (unless you agree otherwise).
Collectors need your prior express consent to message you on WhatsApp. This can be given orally or in writing, but must be clear.
Once you reply "STOP" or otherwise indicate you don't want WhatsApp contact, all messages must cease.
Messages outside 8am-9pm your local time violate the FDCPA unless you've explicitly agreed otherwise.
The CFPB presumes 7+ calls/conversations within 7 days is harassment. This applies to WhatsApp conversations too.
Abusive language, threats of violence, or obscene content is always prohibited — regardless of channel.
The CFPB rule specifically addresses social media contact by debt collectors:
The CFPB has brought enforcement actions against collectors for:
Under the FDCPA and CFPB rule, you have multiple ways to stop digital debt collection contact:
| Method | How It Works | Effectiveness |
|---|---|---|
| Reply STOP to text/WhatsApp | Most collectors use systems that recognize STOP, END, QUIT, etc. | Immediate; should stop automated messages |
| Email opt-out link | CFPB requires all collection emails to have unsubscribe link | Should stop emails within 10 days |
| Written cease-and-desist | Send letter demanding all contact stop | Legally binding; only legal notices allowed after |
| Phone call (documented) | Call and demand no digital contact; request confirmation | Binding but harder to prove |
| Block the number/account | Block collector's WhatsApp/email/phone | Stops their messages but doesn't legally bind them |
For maximum protection, send a written cease-and-desist letter. This is your strongest legal option:
Send via certified mail with return receipt requested — this creates legal proof they received your demand.
Most legitimate collectors use systems that automatically honor STOP replies. This should immediately stop automated messages.
In WhatsApp: Open the chat → Tap contact name → Scroll down → Block [Contact]. This prevents further messages from that number.
WhatsApp allows you to report spam: Open chat → Tap contact → Scroll down → Report. This helps WhatsApp identify abusive senders.
For comprehensive protection, send a written cease-and-desist letter (template above) via certified mail.
If collectors ignore your opt-out, file complaints with CFPB (consumerfinance.gov/complaint), FTC (reportfraud.ftc.gov), and your state attorney general.
| Violation | Description | Statutory Damages |
|---|---|---|
| Contact without consent | Messaging on WhatsApp/SMS without prior consent | $500-$1,500 per message (TCPA) |
| Ignoring opt-out | Continuing to message after STOP reply or cease letter | $500-$1,500 per message (TCPA) |
| Third-party disclosure | Social media posts visible to friends/family | Up to $1,000 (FDCPA) |
| Harassment | Excessive messages (7+ in 7 days) | Up to $1,000 (FDCPA) |
| Wrong time contact | Messages outside 8am-9pm your time | Up to $1,000 (FDCPA) |
| No opt-out mechanism | Messages without STOP instructions | Up to $1,000 (FDCPA) |
The FDCPA requires debt collectors to pay your attorney's fees if you win. This means consumer attorneys can take your case on contingency (no upfront cost). Digital violations are often well-documented (screenshots, message logs), making them strong cases.
Our free Debt Validation Letter Generator helps you dispute debts and demand collectors stop all contact — including WhatsApp, text, and email.
Generate Free Letter →